Glossary

Glossary

Simple definitions and explanations of Kubernetes components, concepts, and security terms

Jump
ACDEHIJKLNOPRSTV
A 2
Admission Controller COMPONENT
A plugin that intercepts API server requests to validate or mutate resources before they are persisted
API Server COMPONENT
The central management component that exposes the Kubernetes API
C 7
ClusterRole RESOURCE
A cluster-scoped RBAC object that defines permissions across all namespaces or for non-namespaced resources
ClusterRoleBinding RESOURCE
A cluster-scoped RBAC object that grants the permissions defined in a ClusterRole across the entire cluster
ConfigMap RESOURCE
A Kubernetes object used to store non-sensitive configuration data as key-value pairs
Container COMPONENT
A lightweight, standalone executable unit that packages an application and its dependencies
Container Escape ATTACK
A security vulnerability where an attacker breaks out of a container to access the host system
CronJob RESOURCE
A Kubernetes controller that creates Jobs on a recurring schedule defined using cron syntax
CustomResourceDefinition RESOURCE
A way to extend Kubernetes by defining your own resource types
D 2
DaemonSet RESOURCE
Ensures a copy of a Pod runs on all or selected nodes in the cluster
Deployment RESOURCE
A controller that manages the desired state of Pods and ReplicaSets
E 1
etcd COMPONENT
The distributed key-value store that holds all Kubernetes cluster state
H 1
Helm COMPONENT
A package manager for Kubernetes that bundles resources into reusable, versioned charts
I 1
Ingress RESOURCE
Manages external HTTP/HTTPS access to services in the cluster
J 1
Job RESOURCE
A Kubernetes controller that runs one or more Pods to successful completion
K 2
kube-proxy COMPONENT
A network proxy that runs on each node and maintains network rules for Services
Kubelet COMPONENT
The agent running on each node that manages Pods and containers
L 1
Label and Selector RESOURCE
Key-value pairs attached to Kubernetes objects and the queries used to filter them
N 3
Namespace RESOURCE
A virtual cluster within Kubernetes used to isolate and organize resources
NetworkPolicy RESOURCE
A Kubernetes resource that controls traffic flow between pods and namespaces
Node COMPONENT
A worker machine in Kubernetes that runs Pods and is managed by the control plane
O 1
Operator COMPONENT
A pattern for extending Kubernetes with custom controllers that automate the management of complex applications
P 2
PersistentVolume RESOURCE
A piece of storage in the cluster that has been provisioned for use by Pods independently of their lifecycle
Pod RESOURCE
The smallest deployable unit in Kubernetes that can be created and managed
R 4
RBAC (Role-Based Access Control) SECURITY
A method of regulating access to computer or network resources based on the roles of individual users
ReplicaSet RESOURCE
A Kubernetes controller that ensures a specified number of Pod replicas are running at all times
Role RESOURCE
A namespace-scoped RBAC object that defines a set of permissions for resources within a single namespace
RoleBinding RESOURCE
A namespace-scoped RBAC object that grants the permissions defined in a Role to users, groups, or service accounts
S 4
Secret RESOURCE
A Kubernetes object used to store sensitive data such as passwords, tokens, and keys
Service RESOURCE
An abstraction that exposes a set of Pods as a network service
ServiceAccount RESOURCE
An identity for processes running inside Pods to authenticate with the API server
StatefulSet RESOURCE
A Kubernetes workload controller for managing stateful applications that require stable identities and persistent storage
T 1
Taint and Toleration RESOURCE
A mechanism to control which Pods can be scheduled onto specific nodes
V 1
Volume RESOURCE
A directory accessible to containers in a Pod, used to share data or persist state beyond a container's lifetime